This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
File:                     3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json)
Hash identifier:          aunyhXJxcrlBWoO3m0XF6MnhgYcmqC8pQ4m5c3+unao=
Subject key identifier:   AF:56:80:B3:E9:43:21:E4:85:95:1B:3C:84:81:2B:C8:60:36:E1:DD
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       1448F1D963A00D262984C5FB2CCBF4BBBA3EC5FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
Manifest number:          034A
Signing time:             Mon 22 Dec 2025 02:33:37 +0000
Manifest this update:     Mon 22 Dec 2025 02:28:37 +0000
Manifest next update:     Tue 23 Dec 2025 05:35:37 +0000
Files and hashes:         1: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: 334eFyhe5qHaD8UdK0Gjl0ftTL+be+I51bBwMtBerMU=)
                          2: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: Zf5J1vo0exwtyULcPbQWl9oqPv7UiP9VJcKCX094QC8=)
                          3: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: ETEHtw42fkaRu8OOWzIKeNRgm0a3mQp0WoHF4sxJS70=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl
                          rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 05:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:48:f1:d9:63:a0:0d:26:29:84:c5:fb:2c:cb:f4:bb:ba:3e:c5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Dec 22 02:28:37 2025 GMT
            Not After : Dec 23 05:35:37 2025 GMT
        Subject: CN=AF5680B3E94321E485951B3C84812BC86036E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:b2:63:c6:1f:56:07:a2:8c:08:f6:20:7d:
                    9d:90:e2:18:15:09:5a:26:ed:83:21:80:be:e6:a6:
                    6e:3a:b4:f1:a8:1d:08:38:ca:cd:fa:b8:b9:3e:50:
                    55:d2:59:f8:8b:b9:25:4b:04:b9:83:75:ae:39:ea:
                    e2:5d:cd:9d:a7:39:6e:b1:20:e6:7d:b1:7f:89:54:
                    06:56:1c:1e:b7:31:6e:7b:12:10:37:a9:d5:e6:05:
                    7a:f8:03:99:5a:16:db:f3:9e:d4:b6:b4:d0:57:09:
                    cc:81:87:60:66:4c:84:4c:de:29:60:58:96:63:dd:
                    1e:78:16:97:92:a3:98:62:ce:29:78:a8:82:dc:34:
                    75:41:23:a1:cf:49:8c:15:3d:25:11:7a:3b:4c:46:
                    62:ef:e6:d3:bb:ee:7a:8b:2b:20:12:34:00:d2:2a:
                    d9:e0:61:8f:18:6c:1c:4e:d6:05:e3:55:83:ff:df:
                    d2:af:32:8f:74:3a:be:7b:01:5c:17:3e:79:30:fe:
                    80:4b:75:36:c7:38:bc:40:ef:7a:9b:35:3e:99:66:
                    a8:78:ac:ae:b5:cd:33:3c:0f:f2:8f:bc:cc:bd:75:
                    34:2f:1b:5e:23:ff:25:9b:ce:34:f9:ea:6c:ce:40:
                    c7:74:0d:52:a3:69:08:eb:99:52:59:00:6b:81:38:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:80:B3:E9:43:21:E4:85:95:1B:3C:84:81:2B:C8:60:36:E1:DD
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:34:83:11:30:97:24:1d:05:0a:3c:e1:f7:31:90:f8:6f:61:
         ee:75:b3:f0:75:9b:fd:e6:e9:ee:4b:ee:a3:b9:65:d4:b3:2d:
         25:56:92:b4:70:6c:49:9c:de:32:d5:c8:55:e3:db:78:3a:a7:
         81:bc:36:60:86:85:0c:2f:0a:a6:8e:97:f5:f1:68:8f:11:6b:
         6a:e7:7a:db:56:65:a7:5b:45:8b:93:bc:4c:4f:86:ce:57:a4:
         3c:1b:58:29:bc:91:66:fb:23:ce:36:ad:ad:2e:5c:ea:b6:9d:
         e9:cb:55:81:d1:ae:cb:d7:27:ac:96:ca:d2:aa:30:f8:98:da:
         f5:74:a9:15:68:c5:a2:ee:29:13:72:28:13:27:ec:f6:83:55:
         ab:10:8e:8e:39:3e:fb:ee:79:c0:a2:f1:75:23:98:1f:fb:f7:
         4c:57:36:b4:e5:2d:8e:c5:99:02:ec:18:44:7f:10:66:a5:be:
         15:dc:ef:ce:26:29:99:cb:0d:82:5b:9f:3c:b5:e3:50:9b:11:
         a2:c8:76:1a:c5:24:79:f9:78:26:ec:e9:fe:06:94:f7:96:3f:
         0f:c8:b7:62:59:40:02:e3:85:92:93:40:ee:b0:b7:2c:3e:c1:
         9b:11:51:c1:12:f7:b2:32:0c:11:d0:41:0f:b6:7f:39:86:67:
         0a:a3:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:36:06 2025 by rpki-client